$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/a877a0c9-84a4-318a-9663-ba423b6a5dfd.roa File: a877a0c9-84a4-318a-9663-ba423b6a5dfd.roa (raw, json) Hash identifier: EQP0W8ie88zDsEwcj7PY2+bCrcaB5h66ipmvvtdsT2k= Subject key identifier: 80:CC:CB:25:07:56:56:BF:13:3A:F7:CE:8F:48:55:72:54:A8:31:5B Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Certificate serial: 010D0C9F4328584909E6A4ABC198EF6D6BB03418 Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/a877a0c9-84a4-318a-9663-ba423b6a5dfd.roa Signing time: Sat 01 Mar 2025 02:00:39 +0000 ROA not before: Sat 01 Mar 2025 02:00:39 +0000 ROA not after: Fri 30 May 2025 01:00:39 +0000 asID: 394437 IP address blocks: 72.20.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Apr 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:09:e6:a4:ab:c1:98:ef:6d:6b:b0:34:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f Validity Not Before: Mar 1 02:00:39 2025 GMT Not After : May 30 01:00:39 2025 GMT Subject: CN=1574f369-2b54-45dc-8326-fe63cabea574 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:1b:27:5f:cb:10:9a:b2:58:5b:db:dd:38:cc: 5d:8a:f3:cd:fc:c4:55:d4:db:2c:0e:da:a2:b0:bf: 25:a1:29:53:29:62:56:38:ee:31:82:c0:9e:16:82: 23:3b:b5:91:c2:4a:2b:63:c6:f4:9d:da:ff:0a:de: 94:5a:30:0f:60:0f:bf:e0:22:c9:fc:05:67:8f:90: fd:ed:ce:7f:aa:cd:26:45:a2:6e:f6:51:0a:f1:65: c8:e2:a0:cc:aa:46:eb:78:b6:df:ad:b6:5d:03:35: 0a:e3:88:1f:5d:de:79:0b:65:25:6e:5c:82:b4:89: ab:68:a6:c5:be:e4:f5:59:6c:0d:29:27:d9:f2:96: 13:4c:6a:3c:ed:f9:2d:64:2d:31:93:c8:17:ac:ae: 91:4e:87:92:f0:5b:00:5e:c9:30:4c:e6:11:f8:48: 98:c6:fd:30:33:0e:bf:f6:37:f9:8c:83:28:de:ec: 79:fb:a1:f6:2d:c5:d7:1a:a1:75:52:0f:4c:38:5d: 43:8d:5e:96:a1:bb:34:de:31:57:8b:a6:66:ee:ea: ef:0b:42:b1:67:f9:45:05:08:c6:63:39:6c:e1:18: 53:9e:05:1a:c9:a5:60:9c:1c:ee:76:ce:9f:af:a4: a5:af:80:e0:89:fa:f0:26:1d:54:7d:a2:b9:52:c6: 07:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:CC:CB:25:07:56:56:BF:13:3A:F7:CE:8F:48:55:72:54:A8:31:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/a877a0c9-84a4-318a-9663-ba423b6a5dfd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl X509v3 Authority Key Identifier: keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer sbgp-ipAddrBlock: critical IPv4: 72.20.155.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:51:c8:80:cd:3d:7f:89:14:43:64:04:61:a2:9d:67:27:ab: 9c:a5:11:9a:6a:5b:6d:b3:85:f7:51:b1:0f:f9:a0:39:d2:8f: 2c:0e:55:a3:b1:85:66:ad:c2:10:ed:63:2d:19:e2:e8:84:4a: a4:b9:1d:bc:e3:7e:7e:67:e6:38:da:2f:5c:3e:b0:96:8a:5f: c8:a2:c1:08:29:a9:f5:23:a0:53:00:ff:71:7d:c4:f5:f0:ba: 8e:63:b4:b1:63:da:49:54:57:9c:6b:a1:60:ad:06:2c:0e:7a: 94:e2:55:ca:95:fe:08:b7:bb:90:76:2b:7f:09:5e:2c:de:19: ba:9d:0e:c5:a7:ab:64:a0:4b:ec:f7:e6:7c:e9:2d:50:c9:da: 0d:f9:84:c0:7c:8e:0f:82:e2:db:a8:22:97:4f:fd:3d:1d:a3: 78:26:f7:73:b1:21:fd:9c:04:0a:ee:a1:ac:64:4e:08:ab:43: 4f:84:1a:85:98:6f:2e:67:af:97:5a:19:ae:a0:a9:54:c3:f9: b5:7a:4a:e6:c1:f0:c7:e8:2c:2f:e3:b0:a9:63:5f:20:b4:c7: 61:46:be:90:bb:e9:1a:5b:bc:bc:6e:de:0a:89:eb:15:82:8b: 6a:94:c1:27:1a:42:ad:fb:af:73:0e:05:af:a5:89:3a:c5:9c: 21:e1:e3:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkJ5qSrwZjvbWuwNBgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRmYTA1YmYtNWI0Ni00YTU1LWJkNTUtNDg5MWQyMWNi MjRmMB4XDTI1MDMwMTAyMDAzOVoXDTI1MDUzMDAxMDAzOVowLzEtMCsGA1UEAxMk MTU3NGYzNjktMmI1NC00NWRjLTgzMjYtZmU2M2NhYmVhNTc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBsnX8sQmrJYW9vdOMxdivPN/MRV1NssDtqi sL8loSlTKWJWOO4xgsCeFoIjO7WRwkorY8b0ndr/Ct6UWjAPYA+/4CLJ/AVnj5D9 7c5/qs0mRaJu9lEK8WXI4qDMqkbreLbfrbZdAzUK44gfXd55C2UlblyCtImraKbF vuT1WWwNKSfZ8pYTTGo87fktZC0xk8gXrK6RToeS8FsAXskwTOYR+EiYxv0wMw6/ 9jf5jIMo3ux5+6H2LcXXGqF1Ug9MOF1DjV6Wobs03jFXi6Zm7urvC0KxZ/lFBQjG Yzls4RhTngUayaVgnBzuds6fr6Slr4DgifrwJh1UfaK5UsYHZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIDMyyUHVla/Ezr3zo9IVXJUqDFbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZh MDViZi01YjQ2LTRhNTUtYmQ1NS00ODkxZDIxY2IyNGYvYTg3N2EwYzktODRhNC0z MThhLTk2NjMtYmE0MjNiNmE1ZGZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjRmYTA1YmYtNWI0Ni00YTU1LWJk NTUtNDg5MWQyMWNiMjRmLzI0ZmEwNWJmLTViNDYtNGE1NS1iZDU1LTQ4OTFkMjFj YjI0Zi5jcmwwHwYDVR0jBBgwFoAU92+M2Ffccz2Qz8H589/AOKXodIAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNGZhMDViZi01YjQ2LTRhNTUtYmQ1NS00ODkx ZDIxY2IyNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBSbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADVRyIDNPX+JFENkBGGinWcnq5ylEZpqW22zhfdRsQ/5oDnSjywOVaOx hWatwhDtYy0Z4uiESqS5Hbzjfn5n5jjaL1w+sJaKX8iiwQgpqfUjoFMA/3F9xPXw uo5jtLFj2klUV5xroWCtBiwOepTiVcqV/gi3u5B2K38JXizeGbqdDsWnq2SgS+z3 5nzpLVDJ2g35hMB8jg+C4tuoIpdP/T0do3gm93OxIf2cBAruoaxkTgirQ0+EGoWY by5nr5daGa6gqVTD+bV6SubB8MfoLC/jsKljXyC0x2FGvpC76RpbvLxu3gqJ6xWC i2qUwScaQq37r3MOBa+liTrFnCHh4y8= -----END CERTIFICATE-----Generated at Thu Apr 10 19:30:41 2025 by rpki-client